Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/cC9A2bHre93z2HHoiKaD3gbhMp8.roa
File: cC9A2bHre93z2HHoiKaD3gbhMp8.roa (raw, json)
Hash identifier: upiubXGT+kD9pNkA2Lcjupud/SpGpaMLCWgqSaDAuSI=
Subject key identifier: 70:2F:40:D9:B1:EB:7B:DD:F3:D8:71:E8:88:A6:83:DE:06:E1:32:9F
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427472A4AB25853EB76D52E0F9CCDF37A
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/cC9A2bHre93z2HHoiKaD3gbhMp8.roa
Signing time: Thu 02 Jan 2025 13:49:22 +0000
ROA not before: Thu 02 Jan 2025 13:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 185.243.182.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2a:4a:b2:58:53:eb:76:d5:2e:0f:9c:cd:f3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=702f40d9b1eb7bddf3d871e888a683de06e1329f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:bc:d7:46:48:dc:00:3a:dd:c5:f5:eb:e6:
1d:6b:03:37:81:fd:a5:d0:34:c2:a8:75:71:09:ee:
5a:f1:29:7d:5b:16:59:45:28:b3:ff:ca:ff:87:00:
d4:91:77:07:67:8c:e6:5e:72:ec:36:a7:96:d1:58:
9a:48:fd:23:d7:dc:55:49:12:46:12:c9:20:37:47:
fc:62:5b:46:5e:6c:70:26:eb:f6:95:01:b8:ee:09:
b3:8e:1d:76:2b:7c:8c:25:2b:b3:69:51:00:91:f0:
16:b7:38:d3:1e:1a:d5:cc:a1:76:f5:65:e8:99:51:
70:ce:2f:24:58:8c:ed:b3:5e:79:d4:5d:0a:60:38:
14:97:07:12:77:7c:56:eb:fa:68:9c:1e:40:b9:63:
55:95:41:59:3a:db:95:94:ab:5b:6e:3a:ca:e1:c2:
9a:cd:b7:dc:53:58:92:68:f0:3e:23:95:a0:1d:df:
93:8f:d8:36:a5:0d:59:27:99:5c:9d:f7:1f:8d:7b:
7d:37:82:31:b9:1e:57:c0:6d:03:fb:33:27:78:67:
d6:a1:79:74:2f:57:ee:52:54:3f:0c:ee:10:9e:0e:
3b:b2:69:e6:47:fc:f6:e7:db:91:7f:66:97:5c:ee:
5f:a7:af:5f:75:ca:f5:7f:d8:b6:f3:a9:42:8e:89:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2F:40:D9:B1:EB:7B:DD:F3:D8:71:E8:88:A6:83:DE:06:E1:32:9F
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/cC9A2bHre93z2HHoiKaD3gbhMp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.182.0/24
185.249.202.0/24
Signature Algorithm: sha256WithRSAEncryption
af:fc:90:22:7a:b5:ad:08:2a:0c:cf:97:7b:2d:bb:12:0e:02:
be:4b:71:7c:7b:a3:18:3b:f7:a7:d7:3d:c7:fd:32:ce:06:c8:
f2:c5:2c:3b:c3:dd:95:a5:48:c0:fc:8e:46:41:c0:16:a3:28:
ff:cd:5e:5d:ad:be:a3:66:9e:0a:1e:4b:75:58:17:3b:e9:c4:
45:64:39:32:33:63:06:f4:8f:59:32:04:60:cc:f2:3b:a8:b9:
7f:29:1d:67:99:a9:eb:90:f2:01:a4:41:68:ca:03:45:37:64:
cc:6e:31:3a:33:13:9a:c8:e2:9f:9f:4a:b2:c6:7f:4d:48:6b:
31:26:ff:9a:c9:fa:b1:50:e3:7a:45:6e:be:cb:c2:03:70:bf:
83:33:bd:49:9f:1d:9c:bd:cd:05:05:10:7d:13:e3:82:5c:ae:
d5:e3:f7:9a:53:cc:3d:9e:d9:e4:ec:fa:eb:ce:9d:8c:18:3b:
75:43:18:52:3c:71:7b:18:ed:cf:09:ea:ea:ba:56:36:ad:63:
21:ae:4e:f3:ba:53:72:c6:80:53:7d:04:ed:5c:0c:d4:db:ef:
41:6a:7c:5b:f4:b6:6b:69:59:91:f5:c8:b8:6d:ab:bc:09:1c:
6a:e0:ec:ce:47:3b:92:be:9f:10:63:50:db:5a:8b:fe:6d:a6:
5c:18:10:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:05 2025 by rpki-client